authentik helm

No introduction found. Create it?

Install

Install with:

helm repo add authentik-charts https://charts.goauthentik.io/
helm install authentik authentik-charts/authentik -f values.yaml

All Repositories (5 out of 21)

See examples from other people.

NameRepoStarsVersionTimestamp
authentikBeryJu/k8s92023.3.17 hours ago
authentiksamip5/k8s-cluster302023.3.12 days ago
authentikrust84/k8s-gitops162023.3.13 days ago
authentikishioni/homelab-ops152023.3.14 days ago
authentikno1here0003/k3s-cluster62023.3.14 days ago

Values

See the most popular values for this chart:

KeyTypes
redis.enabled (20)
true
boolean
redis.auth.enabled (9)
true
boolean
redis.auth.password (5)
${SECRET_AUTHENTIK_REDIS_PASSWORD}
string
redis.master.persistence.existingClaim (3)
string
redis.master.persistence.enabled (1)
boolean
redis.master.podSecurityContext.enabled (1)
boolean
redis.master.podSecurityContext.fsGroup (1)
number
redis.master.podSecurityContext.fsGroupChangePolicy (1)
string
redis.master.podSecurityContext.runAsGroup (1)
number
redis.master.podSecurityContext.runAsUser (1)
number
redis.master.resources.limits.memory (1)
string
redis.master.resources.requests.cpu (1)
string
redis.master.resources.requests.memory (1)
string
redis.persistence.enabled (3)
false
boolean
redis.metrics.enabled (2)
boolean
redis.metrics.serviceMonitor.enabled (2)
boolean
redis.metrics.resources.limits.memory (1)
string
redis.metrics.resources.requests.cpu (1)
string
redis.metrics.resources.requests.memory (1)
string
redis.architecture (1)
string
redis.commonConfiguration (1)
string
redis.global.imageRegistry (1)
string
redis.global.storageClass (1)
string
redis.replica.podSecurityContext.enabled (1)
boolean
redis.replica.podSecurityContext.fsGroup (1)
number
redis.replica.podSecurityContext.fsGroupChangePolicy (1)
string
redis.replica.podSecurityContext.runAsGroup (1)
number
redis.replica.podSecurityContext.runAsUser (1)
number
ingress.enabled (19)
true
boolean
ingress.hosts[].host (19)
authentik.${SECRET_DOMAIN}
string
ingress.hosts[].paths[].path (19)
/
string
ingress.hosts[].paths[].pathType (10)
Prefix
string
ingress.tls[].hosts[] (18)
- authentik.${SECRET_DOMAIN}
string
ingress.tls[].secretName (12)
tls.authentik
string
ingress.ingressClassName (17)
nginx
string
ingress.annotations."cert-manager.io/cluster-issuer" (9)
letsencrypt-production
string
ingress.annotations."external-dns.alpha.kubernetes.io/target" (9)
ipv4.${SECRET_DOMAIN}
string
ingress.annotations."hajimari.io/enable" (8)
true
string
ingress.annotations."hajimari.io/icon" (7)
string
ingress.annotations.external-dns/is-public (5)
true
string
ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (4)
websecure
string
ingress.annotations."external-dns.home.arpa/enabled" (3)
true
string
ingress.annotations."hajimari.io/appName" (3)
Authentik
string
ingress.annotations."hajimari.io/group" (3)
string
ingress.annotations."kubernetes.io/tls-acme" (3)
true
string
ingress.annotations."nginx.ingress.kubernetes.io/enable-global-auth" (3)
false
string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-read-timeout" (3)
3600
string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-send-timeout" (3)
3600
string
ingress.annotations."nginx.org/websocket-services" (3)
authentik
string
ingress.annotations."external-dns.alpha.kubernetes.io/hostname" (2)
string
ingress.annotations."nginx.ingress.kubernetes.io/router.entrypoints" (2)
string
ingress.annotations.external-dns-cf/is-dns-public (1)
string
ingress.annotations."external-dns.target/enabled" (1)
string
ingress.annotations."hajimari.io/info" (1)
string
ingress.annotations."haproxy-ingress-proxy.pfsense.org/backend" (1)
string
ingress.annotations."haproxy-ingress-proxy.pfsense.org/enabled" (1)
string
ingress.annotations."haproxy-ingress-proxy.pfsense.org/frontend" (1)
string
ingress.annotations."kubernetes.io/ingress.class" (1)
string
authentik.log_level (17)
debug
string
authentik.secret_key (13)
${AUTHENTIK_SECRET_KEY}
string
authentik.postgresql.password (12)
${SECRET_AUTHENTIK_POSTGRES_PASSWORD}
string
authentik.postgresql.name (11)
authentik
string
authentik.postgresql.host (10)
{{ .Release.Name }}-postgresql
string
authentik.postgresql.user (10)
authentik
string
authentik.postgresql.port (1)
number
authentik.postgresql.s3_backup.access_key (1)
string
authentik.postgresql.s3_backup.bucket (1)
string
authentik.postgresql.s3_backup.host (1)
string
authentik.postgresql.s3_backup.secret_key (1)
string
authentik.email.port (11)
465
number, string
authentik.email.from (10)
string
authentik.email.host (9)
string
authentik.email.password (7)
string
authentik.email.username (7)
string
authentik.email.use_tls (6)
true
boolean
authentik.email.use_ssl (5)
true
boolean
authentik.error_reporting.enabled (10)
true
boolean
authentik.error_reporting.environment (2)
string
authentik.error_reporting.sample_rate (1)
number
authentik.error_reporting.send_pii (1)
boolean
authentik.error_reporting.sentry_dsn (1)
string
authentik.outposts.docker_image_base (10)
ghcr.io/goauthentik/%(type)s:%(version)s
string
authentik.outposts.container_image_base (2)
string
authentik.redis.host (9)
{{ .Release.Name }}-redis-master
string
authentik.redis.password (5)
${SECRET_AUTHENTIK_REDIS_PASSWORD}
string
authentik.avatars (1)
string
authentik.geoip (1)
string
image.repository (17)
ghcr.io/goauthentik/server
string
image.tag (17)
2023.3.1
string
image.pullPolicy (7)
IfNotPresent
string
postgresql.enabled (16)
true
boolean
postgresql.postgresqlPassword (9)
${SECRET_AUTHENTIK_POSTGRES_PASSWORD}
string
postgresql.persistence.enabled (6)
true
boolean
postgresql.persistence.existingClaim (4)
string
postgresql.persistence.storageClass (1)
string
postgresql.postgresqlDatabase (6)
authentik
string
postgresql.postgresqlUsername (6)
authentik
string
postgresql.global.imageRegistry (1)
string
postgresql.metrics.enabled (1)
boolean
postgresql.metrics.serviceMonitor.enabled (1)
boolean
postgresql.postgresqlMaxConnections (1)
number
postgresql.primary.podSecurityContext.enabled (1)
boolean
postgresql.primary.podSecurityContext.fsGroup (1)
number
postgresql.primary.podSecurityContext.fsGroupChangePolicy (1)
string
postgresql.primary.podSecurityContext.runAsGroup (1)
number
postgresql.primary.podSecurityContext.runAsUser (1)
number
prometheus.serviceMonitor.create (9)
true
boolean
prometheus.serviceMonitor.interval (4)
30s
string
prometheus.serviceMonitor.scrapeTimeout (4)
3s
string
prometheus.rules.create (8)
true
boolean
geoip.enabled (7)
false
boolean
replicas (4)
1
number
worker.replicas (4)
1
number
envFrom[].secretRef.name (3)
string
initContainers.init-db.envFrom[].secretRef.name (3)
string
initContainers.init-db.image (3)
string
initContainers.init-db.env[].name (2)
string
initContainers.init-db.env[].value (2)
string
initContainers.init-db.env[].valueFrom.secretKeyRef.key (2)
string
initContainers.init-db.env[].valueFrom.secretKeyRef.name (2)
string
serviceAccount.create (3)
boolean
envValueFrom.AUTHENTIK_EMAIL__FROM.secretKeyRef.key (2)
string
envValueFrom.AUTHENTIK_EMAIL__FROM.secretKeyRef.name (2)
string
envValueFrom.AUTHENTIK_EMAIL__HOST.secretKeyRef.key (2)
string
envValueFrom.AUTHENTIK_EMAIL__HOST.secretKeyRef.name (2)
string
envValueFrom.AUTHENTIK_EMAIL__PASSWORD.secretKeyRef.key (2)
string
envValueFrom.AUTHENTIK_EMAIL__PASSWORD.secretKeyRef.name (2)
string
envValueFrom.AUTHENTIK_EMAIL__PORT.secretKeyRef.key (2)
string
envValueFrom.AUTHENTIK_EMAIL__PORT.secretKeyRef.name (2)
string
envValueFrom.AUTHENTIK_EMAIL__USERNAME.secretKeyRef.key (2)
string
envValueFrom.AUTHENTIK_EMAIL__USERNAME.secretKeyRef.name (2)
string
envValueFrom.AUTHENTIK_POSTGRESQL__HOST.secretKeyRef.key (2)
string
envValueFrom.AUTHENTIK_POSTGRESQL__HOST.secretKeyRef.name (2)
string
envValueFrom.AUTHENTIK_POSTGRESQL__NAME.secretKeyRef.key (2)
string
envValueFrom.AUTHENTIK_POSTGRESQL__NAME.secretKeyRef.name (2)
string
envValueFrom.AUTHENTIK_POSTGRESQL__PASSWORD.secretKeyRef.key (2)
string
envValueFrom.AUTHENTIK_POSTGRESQL__PASSWORD.secretKeyRef.name (2)
string
envValueFrom.AUTHENTIK_POSTGRESQL__USER.secretKeyRef.key (2)
string
envValueFrom.AUTHENTIK_POSTGRESQL__USER.secretKeyRef.name (2)
string
envValueFrom.AUTHENTIK_SECRET_KEY.secretKeyRef.key (2)
string
envValueFrom.AUTHENTIK_SECRET_KEY.secretKeyRef.name (2)
string
envValueFrom.AUTHENTIK_EMAIL__USE_TLS.secretKeyRef.key (1)
string
envValueFrom.AUTHENTIK_EMAIL__USE_TLS.secretKeyRef.name (1)
string
fullnameOverride (2)
string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)
string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)
string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)
string
affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
number
deployment.kind (1)
string
deployment.replicas (1)
number
global.storageClass (1)
string
livenessProbe.enabled (1)
boolean
livenessProbe.httpGet.path (1)
string
livenessProbe.httpGet.port (1)
string
livenessProbe.initialDelaySeconds (1)
number
livenessProbe.periodSeconds (1)
number
nodeSelector.worker (1)
string
outposts.docker_image_base (1)
string
podAnnotations."secret.reloader.stakater.com/reload" (1)
string
podSecurityContext.fsGroup (1)
number
podSecurityContext.fsGroupChangePolicy (1)
string
podSecurityContext.runAsGroup (1)
number
podSecurityContext.runAsUser (1)
number
readinessProbe.enabled (1)
boolean
readinessProbe.httpGet.path (1)
string
readinessProbe.httpGet.port (1)
string
readinessProbe.initialDelaySeconds (1)
number
readinessProbe.periodSeconds (1)
number
resources.server.limits.memory (1)
string
resources.server.requests.cpu (1)
string
resources.server.requests.memory (1)
string
resources.worker.limits.memory (1)
string
resources.worker.requests.cpu (1)
string
resources.worker.requests.memory (1)
string
service.enabled (1)
boolean
service.name (1)
string
service.port (1)
number
service.protocol (1)
string
service.type (1)
string
volumeMounts[].mountPath (1)
string
volumeMounts[].name (1)
string
volumeMounts[].readOnly (1)
boolean
volumes[].name (1)
string
volumes[].secret.items[].key (1)
string
volumes[].secret.items[].path (1)
string
volumes[].secret.optional (1)
boolean
volumes[].secret.secretName (1)
string